Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/I9i0WWS-frfVjqHawC8I642O_Mk.roa
File: I9i0WWS-frfVjqHawC8I642O_Mk.roa (raw, json)
Hash identifier: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=
Subject key identifier: 23:D8:B4:59:64:BE:7E:B7:D5:8E:A1:DA:C0:2F:08:EB:8D:8E:FC:C9
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 019421442A778C52ED1E99039AF627C63B00
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/I9i0WWS-frfVjqHawC8I642O_Mk.roa
Signing time: Wed 01 Jan 2025 09:48:22 +0000
ROA not before: Wed 01 Jan 2025 09:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204586
IP address blocks: 185.218.72.0/22 maxlen: 22
185.218.72.0/24 maxlen: 24
185.218.73.0/24 maxlen: 24
185.218.74.0/24 maxlen: 24
185.218.75.0/24 maxlen: 24
2a0b:d440::/29 maxlen: 29
2a0b:d440:72::/48 maxlen: 48
2a0b:d440:73::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2a:77:8c:52:ed:1e:99:03:9a:f6:27:c6:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23d8b45964be7eb7d58ea1dac02f08eb8d8efcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f6:ed:af:2d:70:32:6e:fd:64:b9:44:df:df:
84:f0:9d:56:fa:81:cf:aa:2e:80:7f:80:b1:4e:13:
64:ff:8e:7b:c8:e7:24:bc:ed:8a:34:e8:6c:bc:a8:
56:de:50:1e:6f:aa:d0:cc:85:08:50:e7:21:09:13:
65:c7:27:c0:27:fd:6f:f7:cd:86:7a:91:c3:13:07:
a8:46:91:a3:41:bf:9e:3c:3a:2c:89:c7:24:9c:d7:
57:0a:20:50:9f:f5:a6:16:04:ff:dc:ff:6d:c2:f9:
3b:ec:87:d4:79:f7:58:92:07:82:4d:0d:d9:2b:fc:
68:24:9b:0d:84:35:72:52:ef:5f:17:b3:51:53:f2:
95:22:39:d7:b5:b9:93:f8:ec:08:8c:79:d9:e3:8d:
f7:f2:2a:5b:32:17:25:0c:86:91:a5:d3:42:b1:0a:
cb:a3:0f:3f:cd:49:90:4d:26:74:ac:81:c9:f1:72:
79:aa:41:42:47:18:51:fc:05:ab:08:d1:8c:33:70:
14:ac:3b:59:12:bf:26:61:36:91:85:6d:e2:cf:35:
71:74:a7:fe:47:00:7e:6b:13:fa:e2:de:1c:6c:62:
85:7e:1c:91:b7:f3:b8:09:53:4c:e4:ff:05:64:b6:
e4:46:34:68:d3:e2:39:9c:8a:8c:ce:41:2b:03:90:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D8:B4:59:64:BE:7E:B7:D5:8E:A1:DA:C0:2F:08:EB:8D:8E:FC:C9
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/I9i0WWS-frfVjqHawC8I642O_Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.72.0/22
IPv6:
2a0b:d440::/29
Signature Algorithm: sha256WithRSAEncryption
4d:d2:5b:b9:7a:fa:a9:56:a4:72:f5:93:db:14:71:45:63:c5:
58:2a:79:19:a7:55:b1:2a:65:01:8d:77:6f:45:25:d0:ed:4a:
3b:09:f5:77:01:6f:22:db:64:ea:59:4b:3b:56:50:20:ea:2f:
70:b1:42:7e:a1:fa:8b:13:4e:37:7e:48:c8:a0:53:59:71:5c:
33:43:23:0a:b5:b9:08:bb:9a:8b:15:72:3c:f4:57:da:15:91:
6b:93:a8:62:c2:dd:77:e7:d9:ac:fb:0b:2e:36:97:fd:7a:9c:
93:c7:e6:50:05:c9:a6:32:f4:f9:fb:e3:c3:10:9a:b3:ce:df:
b2:ec:78:d7:7f:b0:c2:6e:16:42:94:fe:bc:c7:66:81:19:45:
95:73:93:c3:23:17:79:91:02:75:d7:95:fc:39:a1:9c:14:0c:
10:5c:d4:a5:a8:ed:27:9f:69:a2:e7:d4:ec:ae:be:69:08:dc:
97:77:66:7d:21:f1:70:c9:d2:ca:80:23:b9:30:ba:58:c8:89:
3a:f2:fb:41:93:cf:24:5d:4b:3d:1c:c8:e5:1a:0f:6e:16:c1:
fc:e9:1e:a2:33:57:6c:c8:f0:2a:87:b7:0d:af:ba:ab:b9:f3:
75:1b:ec:34:fb:70:95:38:6b:31:da:db:b0:3b:cc:bc:ea:20:
24:08:80:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:57 2025 by rpki-client